apache selinx problem

I am having a perplexing apache problem, probably caused by incorrect permissions on files and/or directories.

I three web servers. One does not run on a server that uses SELinux. The other two do. One of them executes scripts just fine. The other does not. This is the error I get:

[Mon Nov 06 12:54:45 2006] [error] [client 10.1.5.58] (13)Permission denied: exec of '/home/httpd/cgi-bin/aa_geocentric.pl' failed
[Mon Nov 06 12:54:45 2006] [error] [client 10.1.5.58] Premature end of script headers: aa_geocentric.pl


The script is located in /home/httpd/cgi-bin. [The same script is located on the other two servers, and works just fine.] This is what I get when looking at permissions.

# ll -Z /home
drwxr-xr-x apache AA system_u:object_r:httpd_sys_content_t httpd

# ll -Z /home/httpd
drwxrwxr-x apache AA system_u:object_r:httpd_sys_script_exec_t cgi-bin

# ll -Z /home/httpd/aa_geocentric.pl
-rwxrwxr-x apache AA system_u:object_r:httpd_sys_script_exec_t aa_geocentric.pl

"AA" is my department's user's group.

I can log into the server and run the script from the command line just fine.

Html seems to render just fine. The problem is with cgi scripts. I've tried UNIX shell scripts, and I get the same problem.

Any ideas what the problem might be?

TIA,
Bill Tangren

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

Relevant Pages

  • Re: [PHP] Working as a PHP/database developer..
    ... > charge by the hour, but I'm trying whereever possible to move away from ... I develop scripts for the (aforementioned web ... servers they work with? ... Zend encoder - always interested in learning more). ...
    (php.general)
  • Re: [PHP] Working as a PHP/database developer..
    ... how can I enforce it since PHP code resides ... > servers they work with? ... >> products, rather than source scripts. ... > Zend encoder - always interested in learning more). ...
    (php.general)
  • Re: What are the dangers of having a Webserver?
    ... >> for user apache. ... It's a bright example of privilege escalation. ... It's easy to break-in into thousands of servers, ... No matter if people are coding their scripts in php, ...
    (comp.os.linux.security)
  • Re: HACMP-Question
    ... Start and Stop scripts full pathnames ... Repeat this step for ALL Application Servers. ... Cluster scripts must reside local to ... That's why HACMP is ...
    (comp.unix.aix)
  • Re: HACMP-Question
    ... Start and Stop scripts full pathnames ... Repeat this step for ALL Application Servers. ... Cluster scripts must reside local to ... That's why HACMP is ...
    (comp.unix.aix)